OWASP New Zealand Day 2010

Introduction

The OWASP New Zealand Day has been the first all day security conference dedicated to web application security in New Zealand. The event attracted more than 150 attendees from all over the country. The conference has been structured in a single stream with seven talks covering multiple topics in the web application security area.

For those people who missed the event or are interested in the conference material, the presentations have been published and can be downloaded from the page.

For any comments, feedback or observations, please don't hesitate to contact us.

Again, big thanks to the sponsors, the speakers and the conference committee for their contributions and support to the organisation of the event.

Presentations

08:30	Registration
09:00	Welcome to OWASP New Zealand Day 2009 Roberto Suggi Liverani / Lech Janczewski - Security-Assessment.com / The University of Auckland
09:15	Keynote: Insecurity and the Internet - pptx Paul Craig - Security-Assessment.com
9:50	Vulnerabilities In Action Brett Moore - Insomnia Security
10:40	Coffee Break
11:10	Testing Web Services - pdf Nick von Dadelszen – Lateral Security
12:00	Lunch Break
13:30	Exploiting Firefox Extensions - pptx Roberto Suggi Liverani / Nick Freeman - Security-Assessment.com
14:15	Application Bug Chaining - pdf Mark Piper - Catalyst IT Ltd
15:00	Snackie Break
15:30	"Where Worlds Collide" - PCI-DSS for OWASP practioners - ppt Dean Carter - Security-Assessment.com
16:15	XSS – The Gloves are Off - pptx Andy Prow / Kirk Jackson - Aura Software Security / Xero
17:00	Panel Discussion/Conclusion

Speakers

Speakers will be announced at the end of June 2010.
Please note that CFP is now open.

Call For Sponsorships (CLOSED)

The aims of OWASP - New Zealand community is to guarantee access to the conference for free in order to allow for wide participation and empower the community itself. As so the OWASP - New Zealand community encourages Industries, Research Institutions and Individuals to sponsor their activities and events.

Two types of sponsorships are available:

• Silver sponsorship: 1500 NZD

- Publication of the sponsor logo on the event web site (top of this page)

• Gold Sponsorship: 3500 NZD

- The publication of the sponsor logo in the event site, in the agenda, on the flyers, brochure and in all the official communications with the attendees at the conference.
- The possibility to distribute the company brochures, CDs or other materials to the participants during the event.
- Sponsor dedicated space at the conference (sponsor booth) to show products/services to the attendees during coffee breaks, lunch and snack breaks.

Those who are interested in sponsoring OWASP New Zealand 2010 Conference can contact the OWASP New Zealand Board.
Sponsors can also make us of the following PayPal button to make payments. Donations are also more than welcome from the NZ community.

<paypal>OWASP New Zealand Day 2010</paypal>

Call for Paper (OPEN) and review process

OWASP solicit contributions on the above topics, or general matters of interest to the community. Those who are interested in participating as speakers to the conference can submit an abstract of the speech to the OWASP New Zealand Board.
The email subject must be “OWASP New Zealand 2010: CFP” and the email body must contains the following information/sections:

• Name and Surname
• Affiliation
• Address
• Telephone number
• Email address
• List of the author’s previous papers/articles/speeches on the same topics
• Title of the contribution
• Type of contribution: Technical or Informative
• Abstract (max one A4 style page)
• Why the contribution is relevant for OWASP New Zealand 2010
• If you are not from New Zealand, will your company support your expenses - Yes/No

The submission will be reviewed by the OWASP New Zealand Board and the most interesting ones will be selected and invited for presentation.

Due to limited budget available, expenses for international speakers cannot be covered. If your company is willing to cover travel and accomodation costs, the company will become "Support Sponsor" of the event.

Conference Venue

The University of Auckland Business School
Owen G Glenn Building
Room: OGGB 260-073 (OGGB4)
Address: 12 Grafton Road
Auckland
New Zealand
Map

Topics

The OWASP Days have always offered a forum for discussion and exchange of ideas among researchers and practitioners who present their experiences and discuss issues related to Web Application Security from a higher level to a technical point of view.

Conference topics include, but are not limited to:

• OWASP Project Presentation (i.e Tool Updates/Project Status etc)
• Threat modelling of web applications
• Privacy Concerns with Applications and Data Storage
• Vulnerability analysis of web applications (code review, pentest, static analysis, scanning)
• Baseline or Metrics for Application Security
• Countermeasures for web application vulnerabilities
• Web application security
• Platform or language (e.g. Java, .NET) security features that help secure web applications
• Secure application development
• How to use databases securely in web applications
• Security of Service Oriented Architectures
• Access control in web applications
• Web services security
• Browser security
• PCI

Conference structure and schedule

OWASP New Zealand Day 2010 will be all day Conference. The conference aims to provide a workshop-like atmosphere in which contributions can be presented and then time is allowed for constructive discussion of their results and processes.

It will be structured in a single stream. During the conference two coffee breaks (one in the morning and one in the afternoon) and the lunch are in program. These might be offered by the sponsors.

The detailed agenda of the conference will be available on the web site before the event.

Conference dates

• CFP close: 15th June 2010
• Contributions submission deadline: 25th June 2010
• Registration deadline: 20th June 2010
• Conference Agenda due: 20th June 2010
• Conference date: 13th July 2010

Conference Committee

OWASP New Zealand Day 2010 Organising Committees:

• Roberto Suggi Liverani – OWASP New Zealand Leader
• Rob Munro – OWASP New Zealand Evangelist
• Lech Janczewski - Associate Professor - University of Auckland

Conference Sponsors

Department of Computer Science ICT and Department of Information Systems and Operations Management

---

Gold Sponsors:

Silver Sponsors: